This plugin hasn’t been tested with the latest 3 major releases of WordPress. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.

WpBom

Descripción

This package is compatible with WordPress Coding Standards, PSR-4.

WordPress integration with OWASP CycloneDX and Dependency Track

Features:

  • Automatic BOM submission to OWASP Dependency Track
  • Manual BOM submission to OWASP Dependency Track
  • Download BOM JSON in OWASP CycloneDX format

Capturas

Instalación

This project uses PHP and Composer.

$ cd wp-content/plugins/ $ git clone https://gitlab.com/sepbit/wpbom.git $ cd wpbom $ composer update –no-dev

Preguntas frecuentes

Add CPE from BOM

add_filter(
    'wpbom_bom',
    function( $bom ) {
        foreach ( $bom['components'] as $key => $component ) {
            if ( 'woocommerce' === $component['name'] ) {
                $bom['components'][ $key ]['cpe'] = 'cpe:2.3:a:woocommerce:woocommerce:' . $component['version'] . ':*:*:*:*:wordpress:*:*';
            }
        }
        return $bom;
    }
);

We are building a feature to automate this

Remove component from BOM

add_filter(
    'wpbom_bom',
    function( $bom ) {
        foreach ( $bom['components'] as $key => $component ) {
            if ( 'woocommerce' === $component['name'] ) {
                unset( $bom['components'][ $key ] );
            }
        }
        return $bom;
    }
);

Add component from BOM

add_filter(
    'wpbom_bom',
    function( $bom ) {
        global $wpdb;
        $db_server_info      = explode( '-', $wpdb->db_server_info() );
        $bom['components'][] = array(
            'type'     => 'application',
            'bom-ref'  => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
            'name'     => strtolower( $db_server_info[2] ),
            'version'  => $db_server_info[1],
            'purl'     => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
            'licenses' => array(
                array(
                    'license' => array(
                        'id' => 'GPL-2.0-or-later',
                    ),
                ),
            ),
        );
        return $bom;
    }
);

Reseñas

There are no reviews for this plugin.

Colaboradores y desarrolladores

“WpBom” es un software de código abierto. Las siguientes personas han colaborado con este plugin.

Colaboradores

“WpBom” ha sido traducido a 1 idioma. Gracias a los traductores por sus colaboraciones.

Traduce “WpBom” a tu idioma.

¿Interesado en el desarrollo?

Revise el código , eche un vistazo al repositorio SVN , o suscríbase al log de desarrollo por RSS .

Registro de cambios

1.4.0

  • Add PHP 8.4

1.2.0

  • Add WordPress as component
  • Fix some bugs

1.1.0

  • Add CPE example
  • Fix Copyright
  • Remove purl

1.0.2

  • Add icon

1.0.0

  • First release!